diff --git a/src/main/java/com/gitlink/softbot/config/AdminInterceptor.java b/src/main/java/com/gitlink/softbot/config/AdminInterceptor.java
index 443d7eb..4526878 100644
--- a/src/main/java/com/gitlink/softbot/config/AdminInterceptor.java
+++ b/src/main/java/com/gitlink/softbot/config/AdminInterceptor.java
@@ -17,7 +17,7 @@ public class AdminInterceptor extends OncePerRequestFilter {
 //            httpServletResponse.addHeader("Access-Control-Allow-Origin", "*");
 //            httpServletResponse.addHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE, PUT, HEAD,PATCH");
 
-            httpServletResponse.setHeader("Access-Control-Allow-Origin", "*");
+            httpServletResponse.setHeader("Access-Control-Allow-Origin", "https://testforgeplus.trustie.net/");
             httpServletResponse.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");
             httpServletResponse.setHeader("Access-Control-Max-Age", "3600");
             httpServletResponse.setHeader("Access-Control-Allow-Headers", "Content-Type,XFILENAME,XFILECATEGORY,XFILESIZE,x-requested-with,Authorization,Cookie");
diff --git a/src/main/java/com/gitlink/softbot/controller/market/MarketController.java b/src/main/java/com/gitlink/softbot/controller/market/MarketController.java
index 64661dd..ecffd00 100644
--- a/src/main/java/com/gitlink/softbot/controller/market/MarketController.java
+++ b/src/main/java/com/gitlink/softbot/controller/market/MarketController.java
@@ -16,7 +16,7 @@ import javax.annotation.Resource;
 
 
 @RestController
-@CrossOrigin(allowCredentials = "true")
+@CrossOrigin()
 public class MarketController {
 
     @Resource
diff --git a/src/main/java/com/gitlink/softbot/controller/user/UserController.java b/src/main/java/com/gitlink/softbot/controller/user/UserController.java
index 9f98f9c..de9bac2 100644
--- a/src/main/java/com/gitlink/softbot/controller/user/UserController.java
+++ b/src/main/java/com/gitlink/softbot/controller/user/UserController.java
@@ -12,7 +12,7 @@ import javax.validation.Valid;
 
 
 @RestController
-@CrossOrigin(allowCredentials = "true")
+@CrossOrigin()
 public class UserController {
 
     /**